Properly filter params

this enforces removal of the query string before it hits the logger.